What’s Vulnerable › Vulnerabilities

CVE-2023-49052

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.4% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2023-11-30 · updated 2026-06-17
• Weakness: CWE-434

Description

File Upload vulnerability in Microweber v.2.0.4 allows a remote attacker to execute arbitrary code via a crafted script to the file upload function in the created forms component.

Affected products

• microweber/microweber: 2.0.4

References

• https://github.com/Cyber-Wo0dy/CVE-2023-49052
• https://github.com/Cyber-Wo0dy/report/blob/main/microweber/v2.0.4/microweber_unrestricted_upload
• https://github.com/Cyber-Wo0dy/CVE-2023-49052
• https://github.com/Cyber-Wo0dy/report/blob/main/microweber/v2.0.4/microweber_unrestricted_upload

Get alerted when CVE-2023-49052 or the next vulnerability affects your stack